Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
File:                     c753282b-6491-33e8-a0e1-bab307a0dd28.roa (raw, json)
Hash identifier:          3H/+6GaHQwFY5BRr5XgsQkwlXSV/36FGWBWvPLKoloQ=
Subject key identifier:   C4:4A:00:C0:A3:0D:2A:AE:1D:77:7C:B6:DA:21:45:12:EF:7E:0B:DC
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584F4972C641098332148E412900
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        139.125.0.0/16 maxlen: 16
                          192.205.31.0/24 maxlen: 24
                          192.205.32.0/22 maxlen: 22
                          192.205.36.0/23 maxlen: 23
                          199.178.180.0/24 maxlen: 24
                          204.159.108.0/22 maxlen: 22
                          206.141.192.0/24 maxlen: 24
                          206.141.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c6:41:09:83:32:14:8e:41:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2c92ee0d-fbdc-483a-9274-ca49d286f561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:06:26:5c:2b:9b:1e:9c:68:d8:21:f3:be:
                    59:c2:46:e9:6a:28:fb:38:d1:34:83:5c:72:25:fb:
                    38:4f:a7:68:76:9b:df:61:2b:b6:dc:9e:69:45:a5:
                    77:be:74:be:e4:66:e0:00:f7:f5:44:39:3c:f1:36:
                    69:61:1b:39:ef:1b:63:f6:84:25:3c:75:2a:6f:6e:
                    f5:d8:3d:73:63:6a:33:51:33:54:5e:1c:d3:94:3c:
                    71:8a:79:c9:cb:8f:5e:1d:da:e3:80:20:1f:e0:69:
                    89:9d:fa:05:db:ae:d6:1d:54:74:ff:0d:5b:a4:e1:
                    fb:1e:5a:83:54:cd:b8:69:a0:ef:fb:0d:42:9d:54:
                    55:b0:ac:ce:09:96:d1:2a:1c:51:f0:4a:e5:61:d4:
                    88:3b:91:13:f1:60:df:57:6f:de:bb:9b:84:50:64:
                    50:ec:d2:4a:3e:fd:c6:65:48:ec:6f:ec:1c:98:92:
                    bb:30:9f:45:0a:83:b2:77:ec:88:d7:e9:be:95:49:
                    10:2b:8e:e0:49:f3:8f:7f:41:c7:d1:10:99:6f:c3:
                    1e:3d:bf:44:fe:1b:de:36:e6:71:21:b3:02:bc:39:
                    61:36:fc:13:6e:35:53:a8:78:1d:8b:e5:49:cd:3d:
                    96:5b:3c:1f:a0:b5:2c:b1:01:a6:a1:77:c1:32:b6:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:00:C0:A3:0D:2A:AE:1D:77:7C:B6:DA:21:45:12:EF:7E:0B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.125.0.0/16
                  192.205.31.0-192.205.37.255
                  199.178.180.0/24
                  204.159.108.0/22
                  206.141.192.0/24
                  206.141.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:82:51:40:0c:ce:c8:fe:19:0d:ac:81:90:1a:4d:cc:94:
         b3:df:7f:57:12:6e:c5:c1:5c:87:56:71:44:4d:c1:3e:ea:0b:
         3d:2b:e8:f5:8c:f6:58:d7:ce:21:ce:f6:68:f7:0f:ff:d2:85:
         7f:e5:58:57:d2:11:75:d6:fc:19:b2:7a:1e:05:73:e8:a3:3f:
         0d:9b:e1:2d:a6:ec:32:4c:74:2d:aa:63:fa:d7:8c:54:93:02:
         e9:ff:40:94:a5:e4:bd:a7:01:5a:fa:82:59:e4:a0:89:47:30:
         16:83:4b:58:31:34:67:13:14:70:c5:59:44:71:d4:6e:94:3d:
         b1:59:9a:04:9b:dc:9f:46:d1:c5:ad:aa:37:e0:85:a4:36:19:
         88:70:0d:8d:7a:91:ff:c1:d1:8c:3d:e7:57:6c:cc:37:c4:64:
         da:6b:0a:40:ce:2b:a4:18:3a:20:97:b1:2d:7e:4b:9b:6c:6d:
         66:a9:14:79:db:3b:9d:0d:a9:70:8d:6b:4f:d0:9d:b8:d5:90:
         71:68:ea:95:2b:14:5c:85:ca:4a:36:07:9f:e5:3a:63:cf:bb:
         3d:3c:bf:62:9d:d2:d1:22:f8:b7:2c:03:3b:35:9c:bb:9e:d2:
         f8:b3:65:ad:e9:ab:20:12:dc:0a:d8:44:6b:28:3b:b1:0e:80:
         bc:88:de:6d
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWE9JcsZBCYMyFI5BKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NmZTY2M2MtODg3OC00Y2MwLWE3NzItMTdlNzZhNDkz
MDQwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmM5MmVlMGQtZmJkYy00ODNhLTkyNzQtY2E0OWQyODZmNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy0GJlwrmx6caNgh875Zwkbpaij7ONE0g1xy
Jfs4T6dodpvfYSu23J5pRaV3vnS+5GbgAPf1RDk88TZpYRs57xtj9oQlPHUqb271
2D1zY2ozUTNUXhzTlDxxinnJy49eHdrjgCAf4GmJnfoF267WHVR0/w1bpOH7HlqD
VM24aaDv+w1CnVRVsKzOCZbRKhxR8ErlYdSIO5ET8WDfV2/eu5uEUGRQ7NJKPv3G
ZUjsb+wcmJK7MJ9FCoOyd+yI1+m+lUkQK47gSfOPf0HH0RCZb8MePb9E/hveNuZx
IbMCvDlhNvwTbjVTqHgdi+VJzT2WWzwfoLUssQGmoXfBMrYHlwIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFMRKAMCjDSquHXd8ttohRRLvfgvcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jY2Zl
NjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3NmE0OTMwNDAvYzc1MzI4MmItNjQ5MS0z
M2U4LWEwZTEtYmFiMzA3YTBkZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2NmZTY2M2MtODg3OC00Y2MwLWE3
NzItMTdlNzZhNDkzMDQwL2NjZmU2NjNjLTg4NzgtNGNjMC1hNzcyLTE3ZTc2YTQ5
MzA0MC5jcmwwHwYDVR0jBBgwFoAU/2L6gldR0zn/TiyQIVW+1KjY3vAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jY2ZlNjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3
NmE0OTMwNDAuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwMAi30wDAME
AMDNHwMEAcDNJAMEAMeytAMEAsyfbAMEAM6NwAMEAc6N+jBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWrYJR
QAzOyP4ZDayBkBpNzJSz339XEm7FwVyHVnFETcE+6gs9K+j1jPZY184hzvZo9w//
0oV/5VhX0hF11vwZsnoeBXPooz8Nm+EtpuwyTHQtqmP614xUkwLp/0CUpeS9pwFa
+oJZ5KCJRzAWg0tYMTRnExRwxVlEcdRulD2xWZoEm9yfRtHFrao34IWkNhmIcA2N
epH/wdGMPedXbMw3xGTaawpAziukGDogl7EtfkubbG1mqRR52zudDalwjWtP0J24
1ZBxaOqVKxRchcpKNgef5Tpjz7s9PL9indLRIvi3LAM7NZy7ntL4s2Wt6asgEtwK
2ERrKDuxDoC8iN5t
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:33:16 2026 by rpki-client